version 1.12, 2004/04/26 00:07:29
|
version 1.18, 2007/02/01 06:20:34
|
Line 30 package Apache::lonracc;
|
Line 30 package Apache::lonracc;
|
|
|
use strict; |
use strict; |
use Apache::Constants qw(:common :remotehost); |
use Apache::Constants qw(:common :remotehost); |
use Apache::lonnet(); |
use Apache::lonnet; |
use Apache::File(); |
use Apache::File(); |
|
use IO::Socket; |
|
|
sub subscribed { |
sub subscribed { |
my ($filename,$id) = @_; |
my ($filename,$id) = @_; |
|
|
|
return 0 if (-e "$filename.subscription"); |
|
|
|
my $hostname=$Apache::lonnet::hostname{$id}; |
|
my (undef,undef,undef,undef,$ip) = gethostbyname($hostname); |
|
|
|
return 0 if (length($ip) != 4); |
|
|
|
$ip=inet_ntoa($ip); |
|
|
|
my $expr='^'.quotemeta($id).':'.quotemeta($ip).':'; |
|
|
my $found=0; |
my $found=0; |
my $expr='^'.$id.':'.$Apache::lonnet::hostip{$id}.':'; |
if (my $sh=Apache::File->new("$filename.subscription")) { |
$expr =~ s/\./\\\./g; |
|
my $sh; |
|
if ($sh=Apache::File->new("$filename.subscription")) { |
|
while (my $subline=<$sh>) { if ($subline =~ /$expr/) { $found=1; } } |
while (my $subline=<$sh>) { if ($subline =~ /$expr/) { $found=1; } } |
$sh->close(); |
$sh->close(); |
} |
} |
Line 48 sub subscribed {
|
Line 58 sub subscribed {
|
|
|
sub handler { |
sub handler { |
my $r = shift; |
my $r = shift; |
my $reqhost = $r->get_remote_host(REMOTE_DOUBLE_REV); |
my $reqhost = $r->get_remote_host(REMOTE_NOLOOKUP); |
if (!$reqhost && $r->get_remote_host(REMOTE_NOLOOKUP) eq $r->get_server_name()) { |
my %iphost=&Apache::lonnet::get_iphost(); |
$reqhost = $r->get_server_name(); |
my $hostids=$iphost{$reqhost}; |
} |
if (!$hostids && $reqhost ne '127.0.0.1' ) { |
unless ($reqhost) { |
$r->log_reason("Unable to find a host for ". |
$r->log_reason("Spoof request from ".$ENV{'REMOTE_ADDR'}); |
$r->get_remote_host(REMOTE_NOLOOKUP)); |
return FORBIDDEN; |
return FORBIDDEN; |
|
} |
|
if ($reqhost eq '127.0.0.1') { |
|
return OK; |
} |
} |
if ($reqhost eq 'localhost.localdomain') { |
my $return; |
return OK; |
my @ids; |
|
|
|
foreach my $id (@{$hostids}) { |
|
my $filename=$r->filename; |
|
my $uri =$r->uri; |
|
if (($filename=~/\.meta$/) || |
|
($uri=~m|^/raw/uploaded|) || |
|
(-e "$filename.$id") || |
|
&subscribed($filename,$id) ) { |
|
return OK; |
|
} else { |
|
$return=FORBIDDEN; |
|
push(@ids,$id); |
|
} |
} |
} |
my $readline; |
if ($return == FORBIDDEN) { |
my $lontabdir=$r->dir_config('lonTabDir'); |
$r->log_reason(join(':',@ids)." not subscribed", $r->filename); |
{ |
return FORBIDDEN; |
my $fh; |
|
unless ($fh=Apache::File->new("$lontabdir/hosts.tab")) { |
|
$r->log_reason("Could not find host tab file"); |
|
return FORBIDDEN; |
|
} |
|
my $return; |
|
my @ids=(); |
|
while ($readline=<$fh>) { |
|
my ($id,$domain,$role,$name,$ip)=split(/:/,$readline); |
|
if ($name =~ /$reqhost/i) { |
|
my $filename=$r->filename; |
|
my $uri =$r->uri; |
|
if ((-e "$filename.$id") || |
|
&subscribed($filename,$id) || |
|
($filename=~/\.meta$/) || |
|
($uri=~m|^/raw/uploaded|)) { |
|
return OK; |
|
} else { |
|
$return=FORBIDDEN; |
|
push(@ids,$id); |
|
} |
|
} |
|
} |
|
if ($return == FORBIDDEN) { |
|
$r->log_reason(join(':',@ids)." not subscribed", $r->filename); |
|
return FORBIDDEN; |
|
} |
|
} |
} |
$r->log_reason("Invalid request for file transfer from $reqhost", |
$r->log_reason("Invalid request for file transfer from $reqhost", |
$r->filename); |
$r->filename); |